CVE-2025-22916
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Jan 16, 2025
CWE ID 120
Summary
CVE-2025-22916 is a stack overflow vulnerability affecting RE11S v1.11. The issue is located in the formPPPoESetup function and can be exploited through a maliciously crafted pppUserName parameter. Successful exploitation results in buffer overflow, potentially leading to arbitrary code execution. This vulnerability poses a significant risk and requires immediate attention from users running the affected version of RE11S software. It is recommended that users apply the latest security patches to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.